9fea684da202aad11ff27bf601e4af6a8e65c436c9aaf5f2e5628e31a78fd06b

Analysis

max time kernel
3s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 04:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

276278b4aa15b7db6709f1a688bf9b3c.exe
Size

292KB
MD5

276278b4aa15b7db6709f1a688bf9b3c
SHA1

3371dee3ca31ce6132fc406e3fb5ccd7a2e4010c
SHA256

9fea684da202aad11ff27bf601e4af6a8e65c436c9aaf5f2e5628e31a78fd06b
SHA512

c62ef540979be94844abb1b062e24de040910217be38810eae5e41c0d3c4ea7461efcca2d866615e8830cbcf4507b2b3c1cfd71747819971f02c1d8f1bae631c
SSDEEP

3072:CnYOd4V9diKlqOBq7CFLuupaFBzxk7c7awSZohDnjV2S8NmMx3WarRDS/xtpTxzW:CoicnLuupszxk7USZoDnp23xmg9utEU

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2176	276278b4aa15b7db6709f1a688bf9b3c.exe

C:\Users\Admin\AppData\Local\Temp\276278b4aa15b7db6709f1a688bf9b3c.exe
"C:\Users\Admin\AppData\Local\Temp\276278b4aa15b7db6709f1a688bf9b3c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2176
- C:\Users\Admin\neoco.exe
  "C:\Users\Admin\neoco.exe"
  2⤵
  PID:4108

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\neoco.exe

Filesize
292KB

MD5
55aab66c23dfb70bda1048e20192367b

SHA1
f4e94542c73e4069740c79b342d49ff41e78ebb9

SHA256
ee34fafdc25049b3c5d418b32aa1e372cebfb3d896c3824ec1b46898b8c961cf

SHA512
acccb0a6cf4145dae629250784c6c990dde3097519e6766e8c206f89abcb7ad1e7d7fa25458d258dada4c969416e68347b92dc1402a292549b9273b2b6c21127

Download Submit